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(54) Wireless subscriber terminal proarammlno using a broadcast control channel 



(57) The invention Is a system lor programming 
wire loss subscriber torminals (WSPe) using a broad- 
cast channel of a wiraleaa communication ayalem. A 
control program, foroontrolling operation of the WST, is 
updated using a series oi messages transmitted from a 
base station ovor a broadcast oontrol channel to ono or 
more WST'e simultaneously. Each mosaage in the se- 
ries contains a segment of the control program, and the 
series of messages is interleaved with other control data 
on the broadcast control channel in order to avoid inter- 



ference with other call activities. When a WST identifies 
a message as containing a control program segment, 
Iho WST stores the cegment. Once a complete control 
program has been received, control of the WST can be 
transferred ta the new control program. Receipt af the 
broadcast transmission is subjacl to interruption for a 
variety of roacons, o.g., a WST ie powered off, a WST 
movea ouiside the renge of a baaa elation, other radio 

6ignai6or noise Interfere with the broadcast signal, or a 
call ie received by a WST, which then transfers to a voice 
ohannel, 



CO 
O) 

o 



BNaDDCID;*eP_.., 1Q4S348A2J,, 




FIG. 3 



PrnUdby Jouv», ?fcl0l fUfilC 



'06 07/20 WED 16:40 FAX 03 3402 4660 



SL008 



EP 1 049 346 A2 



Description 

[0001] The invention relates to wireless systems, and 
more particularly to the reprogrammlng ot wireless sub- 
scriber terminate in a wireless system using a broadcast * 
conlrol channel. 

[0002] A wireless subscriber terminal fwsr], also 
krwwn as a 'subscriber* or a "mobile unH.'ie snymobile 
orfixed stationprovidjng e> subscriber's point of interface 
toa wireless system, typically a cellular or wireless local to 
loop system. WST's wtlhlnthe wireless system commu- 
nist a with a base elation, which manages oalb acroaa 
«n air interface by subdividing the available spectrum 
into a number of voice channels and control channels. 
The voice channels carry voica signals and other dale, "£ 
The conlrol channels corn/ information needed to man- 
age the voice channels. Broadcast control channels are 
used to simultaneously transmit Information to all of the 
terminals within range of a baee station, as distin- 
guished from other voice/conlrol channels Wat operate *o 
on a point-to-point oasis. The present nnvemion relates 
to a system for programming WST's ovor st wireless sys- 
tem using a. broadcast control channel. 
[0003] As telephony techniques have advanced, 
WSTs have become Increasingly sophisticated, in ad- j?s 
dttion to radio (requanoy modulation/dBmodulation cir- 
cuitry for transmitting and receiving signals over a wire- 
less channel, W$T6 typically Include signal processing 
(Or transforming audio information between analog and 
digital representations. A microprocessor or mlcrocon* 3? 
trailer is also included, both for controlling the voice 
cnannel hardware and ror providing higher level func- 
tions accessible to aWST ueer. These higher level func- 
tions, or "features.* include those functions familiar to 
the typical ceBular phone user, such as a call-in-absence 33 
Indicator, then alarm, call rflstrictione, hande-frea opor. 
alien, and handcot attributes such ae a phono number, 
Beourity coda, and ringer/alert capability, 
[0004] The mlcroprocessor/mlcrocontroltar requires 
its own software to control initialization of the hardware 40 
when the WST is turned on, and 1o oontrol opcralion of 
the WST while it remains on. This software, referred to 
here as a control program, is stored in a non-volet ilo 
memory go that it remains intact until actively erased. 
Ordinarily, the conlrol program is installed by the WST 
manufacturer Detore delivery. Tne non-volatile memory 
also typically contains programmable data relating to 
the identity ol the particular WST and the feature set- 
tings for the W3T This programmable data Is ordinarily 
entered by a technician prior to delivery to an and user, SO 
[0005] The configuration options for W6T features 
can also be programmed remotely. One approach Is dis- 
closed In the epoelTieaTlon of U.S. Patent No. 5.109,403, 
In which features are activated ovor a voioe ohannal us- 
ing tones. In another approach, control channels are 55 
used to update WST features. While Improving the var. 
satlllly ot wireless systems, mesa approaches aro con- 
strained to setting feature ewrtnhee, which ore then in- 



terpreled by the control program to provide features to 
n WST ueer. They cb nol permit replacement of the con- 
trol program Itself. 

[0006] Ac oontrol programs and available features 
change with the passage of time, it is sometimes desir- 
able to update the entire control program associated 
with a WST, as distinguished from pre-defined features, 
One method of updating control programs is disclosed 
in the specification or u,5, Patent wo. 5,430.877. This 
approach uses a physical connection to update soft- 
ware. Another approach to reprogrejnrning is disclosed 
in the specification of U.S. Patent No, 5,066.293. 
[0007] There remains a nead lor a system to program 
WSTs, i.e., suitable to wireless telephony, I hat permits 
oomplele flexibility in W3T programming/ reprogram' 
mrng tram a remote program database. 
[0008] The present invention includes a mothod for 
programming wireless subscriber terminals in a wireless 
system, the wireless system navlng a Case station in 
wireless communication wilh the wireless subscriber 
terminals using one or more conlrol channels and mul- 
tipls traffic ohonncls, ond each wireless subscriber ter- 
minal having a memory, a non-volatile memory, a proc- 
essor, and an original control program running on the 
procoeeorto control operation of ths wireless subscriber 
terminal, characterized by ths steps of; 

A. initialising ono or more participating wireless sub* 
scriber torminala from the base station, using a con- 
trol channel, to receive a complete Drorjram over a 
selected control channel; 

B. transmitting a complete program from the base 
station uaing the selected control channel, the com- 
plete program comprlslno a plurality of program 
segments communicated to tho wireless subscriber 
terminals in separate messages; 

C. verifying that each participating wireless sue- 
scnoer terminal has received me complete pro* 
gram; 

D. storing the complete program in the non-volatile 
memory of each participating wireless suoscriber 
terminal aa a new control program; and 

E. transferring oontrol of each participating wireless 
subscriber terminal to the new control program. 

[0000] The invention also includse a system for pro- 
gramming wireless subscriber terminals, the system 
comprising: 

a baee station, the base station having a memory; 
a control program stored in the memory or the base 
station; 

ono or moro wiroloce cubcoribor lorminate in wire- 
less communication wilh the bass station over an 
air Interface, the air Interface comprising a plurality 
of traffic channojc and a plurality of conlrol chan- 
nels; 

means tor initialising the one or more wireless sub- 
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ccribor toiminalc, using tho oonkol ohannele, to re- 
ceive the control program; 
means for broadcasting the comrol program lo the 
one or moro wire Ices subscriber terminals; 
mesne lor verifying that eaoh initialized wireless 
subscriber terminal has received the control pro- 

oram: and 

moans lor transferring oonirol of each initialised 
wireless subacriberierminal to the control program. 

[0010] Conveniently, tho control program in a wireless 
eubaoriber terminal is updated by means of coniroi 
channel transmissions irom a base station. The coniroi 
program is transmitted as a series or messages confin- 
ing program segments, inter! saved with othar mease g- 
ea on a broadcast control channel. WhBn a WST iden- 
tities a message as belonging to a coniroi program ap- 
plicable lo the WST, lha WST stores tha program seg- 
ment contained in the mesaage, 
toon] Reception of the broadcast control channel by 
a WST can be inleirupted by, for example, radb inter* 
ference. powering down, or movomonl o1 a WST beyond 
tho range of o boas station. Further, the WST mual drop 
the broadcast control channel and switch to a different 
physical channel lor votcc/dat* traffic, Thus tho W9T it 
not always in a condition to reoervs program maesagoe. 
To address this problem, the basB station arbitrates the 
transmission ol unracelved program segments by poll- 
ing individual WfiTs participating in tho control program 
broadcast end retransmitting program segment^ 
missed by anyol the WSTs. 
[0012] Tha system preferably pinvldes non-volatile 
storage of partial program© in oach WST so that a WST 
need not receive an cnlire program in a single session. 

[0013] TTius the Invention advantageously accom- 
plishes remote WST rep rog ramming in a manner that 
avoids use of the voice channels, and in a manner thai 
does not require a continuous, uninterrupted connection 
to the broadcast control channel. 
[001 4] The invention will now be described, by way of 
example, with reference to tha accompanying drawings 
in which: 

Fig. 1 is a block diagram of a wireless communica- 
tion system; 
Fig. 2 is g diock diagram or a base station; 
Fig. 3 is a block diagram of a wlreiees subscriber 
terminal; and 

Fig, 4 is a diagram of the message formats used In 
the invention. 
Fig. 5 b a date flow chart showing tha flow of daia 
between a base station and wireless subscriber ter- 
minals. 

[001 BJ Figure 1 depicts a wireless communication 

system to according to the present Invention, In which 
a base station 20 is in two-fcuay wireless communication 
with wireless subscriber terminale (WBTa) 94, and in 
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further two-way communication with a landfinc system 
85 vin * trunk 25, The tandline system 25 may be the 
public switched telephone network (PSTN), or any other 
wirod network capable of voice/ data oonnectiona. If an 
active call is present on the trunk 26. the base station 
20 translates the forward irunk slonai to a properly for- 
matted radio signal which is radiated by en antenna 27 
to a WST 24 over lha air interface 30. The WST 24 per* 
forms complementary operations to establish two-way 
voice connections over the air interface 3D. 
(0015] Tha term 'trunk," ee uaed herein, refer© to a 
conventional connection lo a PSTN for carrying a plu- 
rality of telephone signals, and is f unher intended to in- 
elude a plurality of such Irunks, an individual eubacriber 
line, or any other connection to a landllne system 25. 
[0017] The icrms such as "voice channel" and "voice 
traffic", as used herein, are intended to include tho com- 
munication of convenlionai audio elgnale, sa well ee da- 
ta, such ae facsimile or computer data, that might be 
carried by a telephone system 25. 
[0018] The present invention includes an air interface 
30 having at Isoat one oontrof channel, distinct from the 
voice channels, which can provide broadcast communi- 
cation to numerous WSTs 24, along with bi-directional 
control communioalbn botwoon individual WST'e 24 
and tho bose station 20, The preoent invention, is to be 
used primarily with a wireless local loop Installed as an 
alternative to a landline, the communication cyctom 10 
may also bo a cellular or macro/micro-cellular eyet em 
designed for mobile telephony and that certain adapta- 
tions may be made for such cellular applications. 
[001 9] The invention will bo used with more, emerging 
siandardB such ae GSM, PCS t and third generation 
standards derived from the IMT-20D0 proa ram. The fol- 
lowing embodiment or ih g Invention uses the digital sec- 
tor ot tho air interfaoe 90 described by the Telecommu- 
nications Industry Association's IS-136 specification 
(13-136). Briefly stated, the digital sector of IS-136 Is a 
digital, time division multiple access (TDMA) technology 
operating on 600 MHz and 1900 MHz. 
[0020] As shown in Fig. 1 , the IS-1 36 air interlace 30 

includes digital traffic channels 32 which are iwoway 
links for voiea traffic. Tho air interface 30 also includes 
a digital control channel (DCCH) 34 having (logical) 
broadcast control channels forbroadcasilng Informaiion 
from the oase station 20 to numerous WST'£, The 
DCCH 34 also includes several (logical) point-to-point 
control channels for direct, two-way coniroi communi- 
cation between each WST 24 and ihe base station 20. 
This combination of control channels oan be adventa- 
goouoly employed to effectively Irensmrt an onlire con- 
trol program to several paniclpatlng WST's 24 white 
conserving the typically limited digital traffic channels 32 
for voice traffic bolwocn the landline eyelem 25 and the 
WSTe 24. 

[0021] As shown In Fig. 2, the base station 20 pro- 
vidoc an interface between tho landtino cyctom 35 and 
the WST'a 24, In order lo function in this capacity, the 
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basB station 20 includes a MUX/swiich 50 on ong hand 
lo iransmil and receive wired network voice traffic, and 
a radio froquonoy (RF) system 60 connected to the an- 
tenna 27 on the othar hand Id transmit and receive wire* 
less voles traffic across the air Interface 30. A wireless 
accacB controller |WAC) 70 manaa.se the operations of 
the RF system 60 and the MUX/ewitch 50 to eneure that 
each wlreo voice connection is coupled to the correct 
channel of lha air interface 30. The WAC 70 also per. 
forme f unctions related to voice encoding, comprsaeion, 
encryption, and security, 

[0022] With respect to wapressni inuaffllon, the WAC 
70 performs several specific functions. First the WAC 
70 manages the transmission of a control program over 
thB broadcast control channel. The control program is 
stared in a memory 80 in the base station 20. In order 
to transmit the control program to the WST'e 24, the 
WAC 70 divides the control program Into program seg- 
ments Which can be Interleaved with other broadcast 
control channe I tranemiaai on b, i.e., transmitted between 
other control messages ao ea to avoid interfering with 

ordinary operations or the wireless system 10. WFienlt 

la desired to update the control program for the WSTs 
that i'b stored in lha memory 00 of the base eration 20, 
for example, over tho landlino system 25, the wireless 
access controller 70 also manages tne receipt or the 

control program oyer a trunk 26 and eiorago ol tho con- 
trol program in the memory 80. 
[0023] As shown in Fig. 3, a WST 24 transmits and 
receives elgnate through the air interface 3G using an 
antenna 10D coupled loan RF system 110. The demod- 
ulated voice signal, or some encoded representation 

thereof, is carried on a system bus 11 2 to a voice atonal 
port 114. in the preferred wireless local loop embodi- 
ment, the voice signal port 114 ie a modular jaok com- 
patible with standard local loop telephone cords, along 
with any appropriate conversion circuitry. The WST 2a 
also includes a processor 122 connected to the cyslom 
bus 112 for controlling operation of the W8T 24, ae well . 
as a memory 124 fonemporary storage and a nonvol- 
atile memory l 26 Tor storage or a WST control program. 
[0024J The control program consists of a series of in- 
structions which the processor 1 22 can execute to con- 
trol operation of the WST 2d. The term firmware", as 
ueed in the following discussion, is intended to rater to 
an executable firmware image for use with a microcon- 
troller, as well as any other executable coda. Instruc- 
tions, or other software lhat might bo used as a eonlrol 
program for a WST 24. Reprogramming the W6T 24 
with □ new control program comprise© four general 
steps: (1) Initialization, (2) program broadcast, (3) veri- 
fication, and (4) ewHch-over. Thee a steps are now de- 
scribed in dotoil. 

1. Initialization: 

[0025] Before broadcast transmission of g new eon- 
lrol program, the hase station 2D directly Initializes each 



WST 24 by senalng each WST 24 a broadcast flrmwaro 
start (BFS) message 1SQ ovar a forward point-to-point 
control channel. Figure 4 ehowa the format of tho BFS 
message 150, which ie used by each WST 24 10 deter- 
5 mine whether it should participale in tha upcoming con- 
trol program broadcast. The message 160 includes 
a hardware model number 152, a hardware version 
number 1 54, a firmware version number 1 SB Torthc par* 
ticular control program, and a feature set identifier 156. 
' 0 Each WST 24 compares this information with stored in- 
formation to determine whether it should receive the Im- 
pending control program broadcast. 
[0036] Tho BFS message 1 50 also includes informa- 
tion which participating WST's 24 use to handle the aub- 
15 sequent broadcast messages containing the new con- 
trol program. A franker identifier 160 uniquely identrtiee 
the control program broodcosl The some fctentihcaiion 
number fs also Included In alt or the broadcast messages 
containing the ngw control program so thai each WST 
so 24 can recognize them. A force iransfer flag 192 can 
direct the recipient WST 24 to load the new control pro- 
gram even when the WST 24 already has a matching 

ftrnrtiA/aro version number 15G. An automatic switch ■over 
flag 1 64 can be uocd to instruct the W8T 24 to automai- 

£S ically transfer eonlrol to the new control program OflCC 
a complete program has bean received. If tho automatic 
ftwiieh-cvor flag 164 ie not bbI, then the WST 24 Wait© 
for a command from thB bass station 20 to switch to The 
new control program. 

3? [0027] Further flovibilHy is provided by including, in 
the BFS message ISO. a block eize field 166 and a 
number-of-b locks field 18B. By transmitting these pa- 
rameters, the base siation can adjust message lengths 
lor a particular control program broadcast 

■as [0028] Each WST 24 receiving the BFB message 1 50 
replies with its own BFS response (BF$R) message 
180. This is a simple two-pan message transmitted over 
a reverse control channel. The BFSfl message 160 in- 
dudee the transfer identifier 160 from, the oTSmessage 
150, and a response codg 184 which Indicates whether 
the WST 24 will participate in the pending control pro- 
gram transfer, 

[0029] The base station 20 receives a BFSRmessaQe 
1 BO irom each WST 24. This information is stored in the 
46' memory 50 of tho base elation 20 for use during the re- 
programming. A! this point, initialization Ie complete and 
tli 9 basa station 20 may initiate a conirol program broad- 
cast. 

5 <' 2. Control Program Broadcast: 

[O030] Tha baas atation 20 transmits segmento of the 
new control progrem using btvacfcavt firmware biock 

(BFB) me6sa0S5 190 transmitted over a broadcast 
Si' channel. Each BFB message 100 hae three parte. The 
transfer identifier 180 is again used to uniquBfy identify 
the control program broadcast, a block number 194 is 
included to allow for proper soquancing of control pro- 
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gram blocks. And, of course, the firmware block 196 It- 
sell Is included In ine BFB massage 190 tna langin or 
(ho firmware bio ok 106 ie epeoilied in the (previously 
transmitted) BFB message 150. The BFB messages 
1 90 are Interleaved with other broadcast channel trans- <i 
missions within a logical channel so a& to pormrt other 
broadcast channel traffic required for normal operation 
of the wireless communication system 10, 
[0031] "The base elation 20 continue broadcasting 
SF0 messages 160 until H has trenemitted a complete *fl 
control program. If the broadcast channel was an error 
free, unlmerrupied communication medium, this would 
conclude tha firmware trancfor. Howouor, there ic no 
guarantee that every SFfl message 1 90 reaches every 

participating WST 24, Any number of events may causa ix 
a WST 24 to m its S£S messages 1 QO, including a user 
powering off the WST 24, interference in the air inter- 
face, equipment failure, or the WST 24 switching to a 
digital traffic channel 32 Tor normal can activities. Tnus 
the wiralacc cyctom proceeds to verity (ho oonirol pro- 20 
gram broadcast. 



3. Verification: 

[0032] In order to verily the firmware broadcast, tha 
base 6iadon 20 polls all of the participating WSTe 24 
utihg bfosdedfit firmware status r&queni fSFSftecJ 
meaeegaa 800, transmitted over one or more foi-werd 
poinMo-potnt control channels. Each e7FSfleq message 
200 includes no message other than lis own request Tor 
status information. 

[0033] EachW8T24re8pondatotha0F8ffecmea' 
sage 200 using a broadcast firmware status (BFSiai) 
message 210, transmitted to the base station 20 over a 
reverse control channel. The BFStat message 21 0 in- 
cludes a status code 21 2 indicating Ihc status at the re- 
ceived conHOl program, e.g.. iransier incomplete, trans- 
far complete, transfer and twitch-over complete. The 
atptuB code 212 may alsoconiain information available 
from WST 24 self-tests, such as a hardware failure or 
unsuccessful switch-over while attempting to use me 
new control program Thece eeff-teets are described be- 
low in reference to the switch-over to a new control pro- 
gram but they may be conduced before or after the 

WST 2d receives a BFSReq massage 200. 
[0094] Ae with the other massages, the BFSial mes- 
sage 210 includes tha transfer identifier 180. Using a 
blocks received field 216 In the BFSiat message 21 D, 
the WST 2d also intormc the base station 20 of the 
number of blocks successfully received. Finally, the 
SFSiarmaseage 2i 0 Includes e m leslng block mask 21 s 
for identifying those blocks which have nol boon ra- 
ce K/od. Tho mieetng block mask 210 ie a multi-bil meek 
in which each bit represents a series oi control program 
blocks. In a preferred embodiment, the ma9k 19 64 bits 
long and each bit is mapped to a sequential, integer 
number of blocks representing approximately one sixty* 

founh of the entire block range. By coding and aecocflnp 



the missing blocks In this manner with a predeigrmlned 
formula, each WST 24 can quickly and efficiently inform 
the base station 20 of block ranges in which there are 
blocks missing. 

[003S] At this point, ihe base station 20 retransmits 
any missing control program blocks. The colledive 
BFStol messages 210 received by the base station 20 
provide a complete picture of which blocks are missing 
from which WSPs 2/1 within the wireless system 10. In 
order to fill these gape, the base elation 20 may employ 
a number of strategies. The base station 20 may simply 
re -broadcast a complete set of missing blocks, or tho 
base station 20 may individually transmit blocks to each 
WST 24 using forward point-to-point control channels. 
Whe re a single WST 24 has missed a significant n umber 
of blocks, it may even be de&lrabls to transmit a set oi 
miccing b looks using a (higher date rale) digital traffic 
channel. Alternatively the base station 20 may analyze 
the distribution and symmetry oT missing blocks to select 
come mix of these two strategies which optimizes air 
interface traffic and/or speed. Any methodology can be 
employed, provided each participating WST 24 has a 
complete control program prior to swilch-over. 



*< : 4. Switch-over: 

[0036] The final message type of tho reprogromming 
proToooi is a firmware jm'fc/rtjvcr message 220, trans- 
mitted from the base starttan 20 to a WST 24 using a 

an Tonward pofni-io-oolm channel. Upon receipt of the 
titmwa/o swiich-over message 220, the WST 24 etoree 
the complete new control program in non-volatile mam- 
ory 128 and transfers control to the new control pro* 
gram. Optionally, ihc switch -over may bo automatic, ac 

5 - : when the automatic switch-over flag 164 ie eet in the 
initial BFS message 1 50, 

[0037] The old control program Is retained after the 
twitch-over. When the WST 24 flrct transfers control to 
the newoontrol program, a series of internet verification 
if tssis are performed to ensure thai the new control pre 
gram Is operating correctly. This Includes conventional 
power-on self tectc of momoiy 124 and system bus 112 
input/ outputs, Each item of hardware used by Iho con- 
vol program. e.g.> The RF unft no. Is also tested to en* 

4£ sure that JL Is present and responding lo (he processor 
122. IT tho powar-on tests are successfully oompleted, 
the WST 24 then attempts to access the broadcast con- 
trol channel used by the base station 20, using tho new 
control program. If any of thece tectc are failed, the new 

w control program ia rejected and the W3T £4 restores tho 
old conrroi program. If all of these tests are successfully 
completed, tho new control program ic marked ac u ao- 
copted" jco ihot cubooqucnt WST powor-on'o do not ro- 
ault in an inappropriate rejection of the new control pro- 

53 gram), and control of the WST 24 is unconditionally 
transferred to the newoontrol program. 
[0036] Figure 5 shows the flow of data according to 
the programming method described above Tha base 
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station 2D and each WST24ara shown as vertical lines. 
The hor i7onlfil lines indicme dete flow between the base 
station 20 and each WST 24> with arrows indicaling the 
dirocUon of dale, flow, The initialization 240 comprises a 
flFSmoeeage 160 transmitted from the baco station 20 fi 
. to each WST 24 on a point-to-point basis. Once each 
participating WST 24 has responded with a BFSR mes- 
sage 180, the bass elation performs a oontrol program 
broadcast 250 by broadcasting the BFB messages 190 
containing control program blocks. Ii will be noted that w" 
each BFB message 100 is a tingle broadcast transmis- 
sion to all of the participating WST's 24. After all of the 
BFB messages 1 90 have been transmitted, The base 
station 20 performs a verification 260 or the broadcast 
Th ie comprises BFSR&q messages 200 from the base 
station 20 to each WST 24 on a point-to-point channel, 
and a responsive BFSrarmflseage 210 from each WST 
2c to the baee elation 20. Where firmware switch-over 
ia controlled from the baas station 20, a final switch -over 
step 270 is performed by a Firmware Swttch-overmzs- 
sage 220 from Hie base station 20 to each participating 
WST 24. 

[0089] A number of variations to this rcprogramming 
system are possible once the basic update system Is In 
. placo. Each WST 24 may store multiple control pro- 25 
grama for use at different times, with the base elation 
20 controlling each swrtctvovBr as needed. Further, the 
raprog ramming system may be used to provide son- 
ware patches, that is, individual blocks of a control pro- 
gram may be replaced wilhoul replacing the enti'e im- so 2. 
aoe. 

[0040] The invention is a system for programming 
wjreiecc cubeoribor terminate (WSTc) using a broad- 
cast channel of a wireless communication system. A 

control program, tor controlling operation of me WST. is w 
updated using a series of messages transmitted irom a 
base station over a broadcast oontrol channel lo one or 
more WSTe simultaneously. Each message in the se- 
ries contains a segment of the control program, and tne 
series o| meeeagee b interleaved with other control data 40 
on the broadcast control channel in order to avoid inter- 
ference with other call activities. When a WST identifies 
a message as containing a control program segment, 
the WST stores the segmem. Once a complete oontrol 
program has been received, control oi the WST can be -w 3. 
transferred to the new control program. Receipt of the 
broadcast Iransmicsion is subjed to interruption for a 
variety of reason*, o.g. , a WST is powered off, a W6T 
moves outstos me range oi a bass station;- other radio 
signals or noise interfere with the broadcact signal, or a bl\ 
cell is received by o WQT, which then tranolero too voioa 

channel, 



Claims 51- 

1 . A method for programming wireless cubscribor tar- 
minals in a wireless system, the wireless syatem 



having a base station in wireless communication 
with the wireless subscriber terminals using one or 
more control channels and multiple traffic channels, 
and each wireless subscriber terminal having a 
memory, a nonvolatile memory, a processor, and 
an original control program running on Ihc proces- 
sor to control operation of the wireless subscriber 

tormina I, characterised by the slope of: 

A. initializing arte or mora participating wireless 
subscriber terminals irom the bass station, us- 
ing a control channel, to receive a complete 
program over a selected control channel; 

B. transmuting a compleie program from the 
base station using thee elected control channel, 
the compleie program comprising a plurality Df 
program segments communicated to the wire- 
less subscriber terminals in separate messag- 
ed; 

C. verifying that each participating wireless 
subscriber terminal has received tha complete 
program; 

D. oloring the oomplete program in the non-vol- 
atile memory of each participating wireless sub- 
scriber terminal as a new control program; and 

E. ireneforrtng oontrol o! oaoh participating 
wireless subscriber lerminel to the new control 
program. 

A method ee a (aimed in claim 1, characterized by 
the step of verifying including the steps of polling 
each participating wireless subscriber terminal, us- 
ing one or more control eh annate, to dotermine 
whetheranypanioipatingwireleeeeubeoribsrtermi- 
nafe have not received any program segments re- 
transmitting from the base station the program seg- 
ments that any participating wireiecc subscriber ter- 
minals have not received, Ihe un received program 
segments are retransmitted over one or more point* 
to.polnt control channols, find tho un received pro- 
gram segments ere retransmitted over one or more 
broadcast conlrol channels, or retransmitted over 
one or more traffic channels. 

A method as claimed in claim 1 , characterized by 
the step of verifying comprises the step of perform- 
ing a ceries oi diagnostic tests si each participating 
wireless subscriber terminal to determine Ihe valid- 
ity ol the new control program received at that wire- 
less subscriber terminal, and Including the step of 
a tor in g each program segment received by the 
wireless subscriber terminal in the nan-volatile 
memory of the wireless sub6crtoer terminal, so mat 
the wireless subscriber terminal retains all received 
program segments if reception of program seg- 
ments by the wireless suoecr ibs-r terminal is inter- 
rupted 



BNSOOOJDnEP^ l0«awaA}_l > 



6 



'06 07/20 WED 16:63 FAX 03 3402 4660 



0013 



11 



BP 1 04B 34£ A2 



12 



4. A method as claimed in claim 1 characterized by 
ins siep of storing the original control program in 
non-volatile memory allor transferring oontrol of the 
processor to the new control program. 

5 

5. A method as claimed in any one of claims 1 to L 
characterised by the control program and the new 
control program each comprise a sotlware patch Tor 
controlling less than all oi the operations of the wire- 
loss subscriber terminal, and preferably the wire- '0 
less subscriber terminal js a cellular phone. 

6. A method as claimed in claim S characleriHed by 
the wirelese subscriber terminal is a terminal of a 
wireless local loop, and the step of transferring con- is 
hoi 10 me new control program Is forced by the base 
nation during the stop of initializing each wireless 
subscriber terminal. 

7. A system for programming wiroloce subscriber ler- 
mlnale, the syetem comprising: 

a bas g station, (he base station having a mem- 
ory: 

a control program stored in the morrory of tho &s 
baso station: 

ono or mors wiroloce tubterbor lermhale in 
wireless communication with the base station 
over an air interface, the air interface compris- 
ing a plurality 01 traffic channels and e plurality w 
of control channels; 

means for initializing the one or more wireless 
subscriber terminals, using the control chan- 
nels, to receive trie control program; 
mesne Tor broadcasting the control program to 3$ 
the one or more wireless subscriber terminals; 
means for verifying that each initialized wire- 
less subscriber terminal has received ihe con- 
trol program; and 

means (or transferring control of each initialized *o 
wireless subscriber terminal to me control pro- 
gram. 

8. Asysiemascia!medinciaim7. characterized intnat 
me one or more wireless subscriber terminals com- « 
prise cellular phone handsale, and preferably the 
one or more wireless subscribenernwials comprise 
Wireless local loop terminals. 

0. A baoe elation for programming one or mora wire- W 

less subscriber terminals in a wireless system, the 
base station comprising a memory, e control pro- 
gram stored in tho momory as ono or moro program 
segments, a transmitter lor transmitting forward 
messages to wireless subscriber terminals ouor an 55 
air interface, the forward meaeegsa including the 
one or more program segments stored in the mem- 
ory, a receiver for receiving reverse messages Iram 



wireless subscriber terminals over the air interface 
a processor connected to the memory, the transmit- 
ter, and the receiver for controlling operation of the 
base station, the forward messages including 
broadcast firmware elan massages and the reverse 
mescagac inoluding broadcast firmware start re- 
sponse messages. 

10, A base station ae claimed in claim 9 characterized 
in that the forward messages including broadcast 
rirmware status request messages and the reverse 
messages including broadcast firmware statue 
maseagae. 

11. A method tor operating a bsi£Q station to program 
ono or more wirelaee subscriber terminals in a wire- 
lees system, the method comprising the steps of; 

A. initializing a plurality of wireless subscriber 
lerminale, uwng a control channel, lorocoivea 
control program; 

B. broadcasting The control program to the plu- 
rality of wirolees subscriber terminals; 

C. verifying thai each one of the plurality of 
wireless sueecrlDcr terminals haa received mo 
control program; 

D. transferring control of each one of the plu- 
rality of wireless subscriber terminals to ine 
control program; and 

E. transmitting a broadcast firmware start mes- 
sage to each wireless subscriber term hat over 
one or mora forward channels and receiving a 
broadcast firmware stan response message 
from one or more participating wireless sub- 
scriber terminals over one or more reverse 
channels. 

12. A method as olaimed in claim 11 characterised by 
the atcpoF broadcasting including the step of trans- 
mitting one or more broadcast firmware block mas- 
sages over a broadcast ehannot, and tranemitting a 
broadcast firmware statue request message to one 
cr more participating wireless subscriber terminal 
over one or more forward channels, receiving a 
broadcast firmware statue message from one or 
more oi the one or more participating wireless sub- 
scrloar isrmlnals. and retransmitting any missing 
program segments to the ono or more participating 
wireieBs subscriber terminate. 

13. A wireless subscriber terminal tor use in a wireless 
cyciom, th« terminal comprising a memory, o trans- 
mitter for transmitting reverse maseagee from the 
terminal over an air Interface, a receiver tor receiv- 
ing forward moccagos from a base alal bn, the for- 
ward messages including the onB or more program 
segmanis, a processor connected to the memory, 
the transmitter, and the receiver for controlling the 
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terminal, and for storing iha ana or more program 
segments in the memory, in which The forward moo- 
sages include broadcast firmware start meeaagea 
and iha reverse mes6aoes Include broadcast 
firmware start response messages, and lha forward 5 
messages a bo include broadcael firmware etatua 
request messages and the reverse messages In* 
elude broadcast firmware status messages, with 
the forward messages include firmware switch-over 
messages, and the forward messages including the »o 
one or more prooram segments are Broadcast mes- 
sages. 

1 4. A method for operating a wireless subscriber termi- 
nal in a wireless system to receive a control pro- '5 
gram, the method comprising the steps ot initializing 
a terminal, using a control channel, to receive a con- 
uol program. The control program comprising a plu- 
rality of control program segments, receiving a 
broadcast comprising the plurality ol control pro- <» 
gram segments, verifying thai the terminal has re- 
ceived ail ol the control program segments, trans- • 
f erring control of the terminal to the oontrol program, 
including the atop of initializing further comprising 
the steps of receiving a broadcast firmware eiarr ss 
message over a forward channels and transmitting 
a broadcast firmware start response message over 
a reverse channel, the step of receiving a broad- 
casting further comprising tha slap at receiving a 
plurality ol firmware block moccagoc over a broad- - 10 
ceal channel, the etep of verifying including the 
steps of. receiving a broadcast firmware status re- 
quest message over a Torward channels, transmit- 
ting a broadcast firmware statue message over e 
reverse channel, the broadcast firmware status $s 
message Identifying any missing comrd program 
segments, receiving any missing control program 
segments identified in the broadcast firmware sta- 
tus message, and the step of transferring control 
further comprising tho step of receiving a firmware -to 
switch-over message. 
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(57) The Invention Is a system Tor programming 
wiralosc eubeeriber terminals {WST*e) using a broad- 
cael channel of a wireless communication system, A 
control program, for comroillno operation oJ the WST Is 
updaiad using a series of messages transmliledTrom a 
baco ©tali on over a broadcast control channel lo one or 
more WST's simultaneously. Each message in the se- 
ries contains a segment oJ tne control program, and tna 
scries at messages it inierleavad with older control data 
on the broadcast control channel in order to avoid inter- 



ference with other call acilvlllas. When a WST Identifies 
a message as containing a control program segment, 
ihe W6T stores the segment. Once a complete control 
program has been received, control ol the WST can be 
transferred to the new control program. Receipt ot the 
broadcact tranennieeion ic cubject io interruption for a 
variety ol reasons, e.g., a WST is powered off, a WST 
moves outside the range of a basa station, oihar radio 
signals or noise interfere wiih tha broadcast signal, or a 
call ia racsived by a W6T, which then transfers to a voice 
channel. 
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